Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 20, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
248791 7.5 危険 AuraCMS - AuraCMS の index.php におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2007-4908 2012-06-26 15:54 2007-09-17 Show GitHub Exploit DB Packet Storm
248792 7.5 危険 AuraCMS - AuraCMS の mod/contak.php における任意の PHP コードを実行される脆弱性 CWE-20
不適切な入力確認 		CVE-2007-4905 2012-06-26 15:54 2007-09-17 Show GitHub Exploit DB Packet Storm
248793 5.8 警告 AOL - Internet Explorer サーバコントロールにおける任意のコードを実行される脆弱性 CWE-noinfo
情報不足 		CVE-2007-4901 2012-06-26 15:54 2007-09-14 Show GitHub Exploit DB Packet Storm
248794 4.3 警告 University of California - Boinc Forum におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2007-4899 2012-06-26 15:54 2007-09-14 Show GitHub Exploit DB Packet Storm
248795 6.8 警告 AuraCMS - AuraCMS の index.php における任意の PHP コードを実行される脆弱性 CWE-94
コード・インジェクション 		CVE-2007-4886 2012-06-26 15:54 2007-09-13 Show GitHub Exploit DB Packet Storm
248796 4.3 警告 avnex - Avnex AV MP3 Player におけるサービス運用妨害 (DoS) の脆弱性 CWE-noinfo
情報不足 		CVE-2007-4885 2012-06-26 15:54 2007-09-13 Show GitHub Exploit DB Packet Storm
248797 4.3 警告 boesch-it - SimpNews におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2007-4874 2012-06-26 15:54 2007-09-26 Show GitHub Exploit DB Packet Storm
248798 5 警告 Google - Google Picasa における画像ファイルを読まれる脆弱性 CWE-DesignError
CVE-2007-4847 2012-06-26 15:54 2007-09-12 Show GitHub Exploit DB Packet Storm
248799 9.3 危険 enriva development - Enriva Development Magellan Explorer におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2007-4842 2012-06-26 15:54 2007-09-12 Show GitHub Exploit DB Packet Storm
248800 4.3 警告 JBMC Software - DirectAdmin の CMD_BANDWIDTH_BREAKDOWN におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2007-4830 2012-06-26 15:54 2007-09-12 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 20, 2026, 4:01 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
201501 5.5 MEDIUM
Local 		imagemagick
debian 		imagemagick
debian_linux 		A flaw was found in ImageMagick in coders/jp2.c. An attacker who submits a crafted file that is processed by ImageMagick could trigger undefined behavior in the form of math division by zero. The hig… - CVE-2021-20241 2024-11-21 14:46 2021-03-10 Show GitHub Exploit DB Packet Storm
201502 5.3 MEDIUM
Network 		ibm cloud_pak_for_multicloud_management_monitoring IBM Cloud Pak for Multicloud Management Monitoring 2.2 returns potentially sensitive information in headers which could lead to further attacks against the system. IBM X-Force ID: 194513. NVD-CWE-noinfo
CVE-2021-20341 2024-11-21 14:46 2021-03-10 Show GitHub Exploit DB Packet Storm
201503 7.5 HIGH
Network 		privoxy
debian 		privoxy
debian_linux 		A flaw was found in privoxy before 3.0.32. Invalid memory access with an invalid pattern passed to pcre_compile() may lead to denial of service. NVD-CWE-noinfo
CVE-2021-20276 2024-11-21 14:46 2021-03-9 Show GitHub Exploit DB Packet Storm
201504 7.5 HIGH
Network 		privoxy
debian 		privoxy
debian_linux 		A flaw was found in privoxy before 3.0.32. A invalid read of size two may occur in chunked_body_is_complete() leading to denial of service. CWE-125
Out-of-bounds Read 		CVE-2021-20275 2024-11-21 14:46 2021-03-9 Show GitHub Exploit DB Packet Storm
201505 7.5 HIGH
Network 		privoxy privoxy A flaw was found in privoxy before 3.0.32. A crash may occur due a NULL-pointer dereference when the socks server misbehaves. - CVE-2021-20274 2024-11-21 14:46 2021-03-9 Show GitHub Exploit DB Packet Storm
201506 7.5 HIGH
Network 		privoxy
debian 		privoxy
debian_linux 		A flaw was found in privoxy before 3.0.32. A crash can occur via a crafted CGI request if Privoxy is toggled off. - CVE-2021-20273 2024-11-21 14:46 2021-03-9 Show GitHub Exploit DB Packet Storm
201507 7.5 HIGH
Network 		privoxy
debian 		privoxy
debian_linux 		A flaw was found in privoxy before 3.0.32. An assertion failure could be triggered with a crafted CGI request leading to server crash. - CVE-2021-20272 2024-11-21 14:46 2021-03-9 Show GitHub Exploit DB Packet Storm
201508 6.1 MEDIUM
Network 		movabletype movable_type_premium
movable_type_premium_advanced
movable_type_advanced
movable_type 		Cross-site scripting vulnerability in in Add asset screen of Contents field of Movable Type 7 r.4705 and earlier (Movable Type 7 Series), Movable Type Advanced 7 r.4705 and earlier (Movable Type Adva… CWE-79
Cross-site Scripting 		CVE-2021-20665 2024-11-21 14:46 2021-03-5 Show GitHub Exploit DB Packet Storm
201509 6.1 MEDIUM
Network 		movabletype movable_type
movable_type_premium
movable_type_premium_advanced
movable_type_advanced 		Cross-site scripting vulnerability in in Asset registration screen of Movable Type 7 r.4705 and earlier (Movable Type 7 Series), Movable Type Advanced 7 r.4705 and earlier (Movable Type Advanced 7 Se… CWE-79
Cross-site Scripting 		CVE-2021-20664 2024-11-21 14:46 2021-03-5 Show GitHub Exploit DB Packet Storm
201510 6.1 MEDIUM
Network 		movabletype movable_type
movable_type_premium
movable_type_premium_advanced
movable_type_advanced 		Cross-site scripting vulnerability in in Role authority setting screen of Movable Type 7 r.4705 and earlier (Movable Type 7 Series), Movable Type Advanced 7 r.4705 and earlier (Movable Type Advanced … CWE-79
Cross-site Scripting 		CVE-2021-20663 2024-11-21 14:46 2021-03-5 Show GitHub Exploit DB Packet Storm